Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jfQb6zfIsTuVcK24GSMN5KDVNso.roa
File: jfQb6zfIsTuVcK24GSMN5KDVNso.roa (raw, json)
Hash identifier: fIPebUO2/Yv2uUljqvW7HoPvahk+P47Az+PpFrqv34E=
Subject key identifier: 8D:F4:1B:EB:37:C8:B1:3B:95:70:AD:B8:19:23:0D:E4:A0:D5:36:CA
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE6267EA64421281D692B926F385B
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jfQb6zfIsTuVcK24GSMN5KDVNso.roa
Signing time: Tue 15 Sep 2026 21:49:29 +0000
ROA not before: Tue 15 Sep 2026 21:49:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133752
IP address blocks: 142.228.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e6:26:7e:a6:44:21:28:1d:69:2b:92:6f:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8df41beb37c8b13b9570adb819230de4a0d536ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:3b:fd:f9:4d:fa:f3:60:91:fb:d3:53:89:
45:8f:0e:98:59:04:c3:eb:c3:9a:9e:22:bc:2e:dc:
15:8a:7e:a1:31:54:59:2b:ca:89:c3:f3:c3:10:03:
e9:0a:d5:d4:cf:95:34:1f:eb:e7:46:21:3b:80:24:
ca:44:c1:4a:bb:9d:51:7b:5c:50:c5:04:e2:50:7a:
23:f7:b3:47:0c:48:cf:77:f9:0f:69:9c:01:bb:d6:
4d:46:58:e7:b6:12:4b:0d:4f:e6:d6:74:72:a6:45:
f2:cc:30:e5:ee:a2:0a:c2:99:eb:7f:a2:76:3b:8f:
2d:67:d6:f8:e9:2f:38:52:16:c6:08:b4:ac:07:ea:
b0:fb:67:66:1b:91:92:85:71:e0:c1:1a:ed:af:eb:
3d:d9:e9:2b:30:c4:ed:ff:d2:e8:8e:68:2e:4b:a9:
a0:8c:e9:2e:bc:74:28:5a:78:1d:9c:a6:96:c6:66:
81:66:1b:a9:73:a5:62:f8:ff:84:8b:a1:fd:a9:b1:
10:6e:2d:9b:0a:c9:53:f9:ac:9b:e1:75:2c:e2:e6:
3e:51:d0:0b:38:c4:96:0a:d5:fc:b8:ab:12:c5:fc:
a0:98:c2:e2:d8:35:90:14:ae:c3:ee:e3:2e:aa:65:
88:60:2f:be:2e:b1:ee:07:bf:ca:6b:14:22:0d:31:
46:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:1B:EB:37:C8:B1:3B:95:70:AD:B8:19:23:0D:E4:A0:D5:36:CA
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/jfQb6zfIsTuVcK24GSMN5KDVNso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.74.0/23
Signature Algorithm: sha256WithRSAEncryption
88:1a:88:98:d3:76:d7:68:1a:83:b6:d1:91:80:44:21:36:41:
0c:dc:2c:46:da:71:7e:1f:fb:cc:bd:be:7f:38:d9:e0:ce:77:
a9:05:57:3f:80:aa:83:62:e5:a9:56:da:35:51:30:57:25:3b:
e0:25:28:ef:5b:bb:d1:6d:b7:e0:a6:0b:6d:20:4a:3e:7c:7e:
94:21:14:65:9c:4e:03:9f:d5:9f:25:e5:93:df:91:01:a6:ac:
3b:b2:f4:ba:91:7c:52:a3:93:08:9d:08:17:8e:f5:32:59:0e:
50:a1:24:ec:7b:f3:e0:93:a9:04:88:fe:69:18:ba:ff:2e:8c:
d4:6f:29:c6:02:e3:f5:84:75:b9:f2:31:ca:7b:2a:35:fc:ca:
85:12:00:d4:41:db:2b:05:b3:b3:b1:83:98:dc:2d:d0:fe:d8:
34:9c:dc:87:b6:7a:0b:aa:9e:32:ec:66:31:37:19:da:2d:8d:
6a:85:a9:7d:15:92:0a:c1:46:b8:95:d2:2e:c6:04:60:c4:ac:
e0:39:92:29:31:49:3d:53:49:bd:b1:0e:f5:b3:d0:62:ae:f7:
4a:44:1a:4f:40:17:1a:05:a8:34:60:f7:ea:62:ee:22:0f:c0:
67:81:0f:9e:0a:5f:d0:b6:da:bf:3b:2a:15:38:f5:dd:f4:12:
f0:37:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:43:48 2026 by rpki-client